$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2E205EFAB39611EE89CE591AC4F9AE02.roa File: 2E205EFAB39611EE89CE591AC4F9AE02.roa (raw, json) Hash identifier: NrzmE73W3yLi/1jIJoicjvq1ubPr2EcEIDkygSaUw8M= Subject key identifier: 8C:EB:C0:6F:ED:02:B9:6D:49:B2:DE:1A:B6:C0:6D:BC:E5:34:E7:6D Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 19E9 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2E205EFAB39611EE89CE591AC4F9AE02.roa Signing time: Thu 30 May 2024 15:52:30 +0000 ROA not before: Thu 30 May 2024 15:52:30 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 138225 IP address blocks: 157.10.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 20:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6633 (0x19e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 30 15:52:30 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a0be-3770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f9:b4:d6:ad:52:49:1b:29:ca:ea:a8:4f:71: 39:ed:e1:0e:ee:ee:3b:fb:38:9a:f8:fc:b9:39:80: c3:10:6d:11:bb:ab:dd:6b:d8:56:92:f6:55:d7:af: 53:a8:f4:c1:2c:fe:76:ae:3c:f5:8f:45:9c:28:6f: 64:a4:a2:1c:dd:7d:a5:10:ff:96:79:c2:4a:f4:60: cb:08:d0:f5:56:7c:43:fd:b6:67:e2:6f:54:7d:e1: da:ce:4f:8f:be:41:e9:94:7c:0b:0d:59:e7:b0:02: e7:9e:d4:52:a1:a5:e1:8a:c1:39:c2:60:6b:07:1b: c8:e4:f3:0f:e2:22:9d:b0:d4:04:ce:8b:c3:3f:ba: 36:40:e2:b0:14:25:c9:5a:4e:b3:6c:09:34:34:24: 0b:ae:c2:42:54:18:80:ef:73:82:47:c0:99:5e:51: ee:32:53:07:37:0d:0a:4a:77:28:83:b8:c5:1e:62: 48:80:42:a4:87:06:4a:43:b2:c0:3e:68:40:26:34: c3:45:0e:da:13:5c:9b:88:03:7c:57:9b:fa:56:b8: 5a:88:6c:b9:ea:ef:13:e9:28:81:9f:83:bf:a8:64: 4b:7b:f1:cc:09:e2:2c:13:ed:f1:70:69:0d:8e:51: 67:2e:cb:cd:8b:4f:6d:97:64:dd:c3:be:7f:f7:82: 78:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EB:C0:6F:ED:02:B9:6D:49:B2:DE:1A:B6:C0:6D:BC:E5:34:E7:6D X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2E205EFAB39611EE89CE591AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.13.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:a3:df:f2:ef:85:b3:8b:27:7c:91:4c:d6:b7:e6:a0:eb:c7: 55:de:38:7a:15:2a:4c:12:4c:85:3d:fe:b6:f0:e8:71:8e:ac: e8:36:f9:0e:85:43:9e:8e:71:1b:cf:3f:4f:b4:c4:d9:a4:d8: 1a:99:29:09:70:2f:1d:da:3f:67:99:27:f4:11:cd:df:06:e4: 68:0c:84:23:5e:72:6a:7e:1b:01:35:04:c9:8b:e1:bd:ec:bc: 56:37:8d:cf:db:7e:6e:55:27:84:89:0e:14:f1:a2:09:b9:95: 05:3a:ce:c6:29:03:fc:74:b0:40:6f:80:93:99:6c:52:ea:14: 35:22:62:d1:c1:3b:60:1a:1c:7d:6b:dd:75:f9:52:3a:9d:f6: 6c:0e:88:5b:4a:ae:61:b8:ea:cb:c8:81:5e:66:83:78:34:0d: 30:3a:f6:ed:86:58:c7:73:00:3b:3d:03:63:c9:4b:4b:25:6b: 8e:4b:f4:65:d3:89:0c:3e:02:34:4e:8d:80:7d:4d:40:3b:cd: a9:7d:4e:a7:94:87:88:5a:3e:3a:c6:2e:80:98:19:e3:58:99: ad:2d:33:29:c7:ac:2e:71:41:cf:6c:62:50:31:64:67:c2:42: b1:f3:ca:59:9d:76:ba:46:9f:9e:13:fe:cd:fb:8e:22:17:4c: da:3b:96:56 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwNTMwMTU1MjMwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU4YTBiZS0zNzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPm01q1SSRspyuqoT3E57eEO7u47+zia+Py5OYDDEG0Ru6vda9hWkvZV169T qPTBLP52rjz1j0WcKG9kpKIc3X2lEP+WecJK9GDLCND1VnxD/bZn4m9UfeHazk+P vkHplHwLDVnnsALnntRSoaXhisE5wmBrBxvI5PMP4iKdsNQEzovDP7o2QOKwFCXJ Wk6zbAk0NCQLrsJCVBiA73OCR8CZXlHuMlMHNw0KSncog7jFHmJIgEKkhwZKQ7LA PmhAJjTDRQ7aE1ybiAN8V5v6VrhaiGy56u8T6SiBn4O/qGRLe/HMCeIsE+3xcGkN jlFnLsvNi09tl2Tdw75/94J4KQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIzrwG/t ArltSbLeGrbAbbzlNOdtMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkUyMDVFRkFC Mzk2MTFFRTg5Q0U1OTFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACdCg0wDQYJKoZIhvcNAQELBQADggEBAJ6j3/LvhbOLJ3yR TNa35qDrx1XeOHoVKkwSTIU9/rbw6HGOrOg2+Q6FQ56OcRvPP0+0xNmk2BqZKQlw Lx3aP2eZJ/QRzd8G5GgMhCNecmp+GwE1BMmL4b3svFY3jc/bfm5VJ4SJDhTxogm5 lQU6zsYpA/x0sEBvgJOZbFLqFDUiYtHBO2AaHH1r3XX5Ujqd9mwOiFtKrmG46svI gV5mg3g0DTA69u2GWMdzADs9A2PJS0sla45L9GXTiQw+AjROjYB9TUA7zal9TqeU h4haPjrGLoCYGeNYma0tMynHrC5xQc9sYlAxZGfCQrHzylmddrpGn54T/s37jiIX TNo7llY= -----END CERTIFICATE-----Generated at Fri Jun 7 03:18:24 2024 by rpki-client on console-ams.rpki-client.org